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HIDDEN LINK DYNAMIC KEY MANAGER FOR USE IN 
COMPUTER SYSTEMS WITH DATABASE STRUCTURE FOR 
STORAGE OF ENCRYPTED DATA AND METHOD FOR 
STORAGE AND RETRIEVAL OF ENCRYPTED DATA 



FIELD OF THE INVENTION 

This invention relates to computer system security for data storage, transmission, 
and retrieval and, more particiilarly, to encryption methods and database structures for the 
10 storage, transmission, and retrieval of confidential information in computer systems. 



BACKGROUND OF THE INVENTION 

With the proliferation of the Internet and broadband networks, many Internet and 
e-commerce companies are dealing with the exchange of confidential information over the 
% 15 Internet. Examples of confidential information include credit card numbers, bank account 
^fl numbers, social security numbers, birth dates, and highly personal and private medical records. 
Q Current digital certificates issued under the pubhc key infrastructure (PKI) system use secure 
sockets layer (SSL) protocol to protect hitemet communications in transit. Thus, many Internet 
vl companies are using firewalls and SSL as the standard means for protecting commimication 

Is, 20 between their clients and their servers. While SSL protocol developed by Netscape 
li Communications Corporation is capable of providing 128-bit length keys, the longer the key the 

13 stronger the encryption, the use of single and fixed key cryptography to encrypt such confidential 
information is vulnerable to current cyber attack methods. Also SSL protects data in transit only. 
Thus, recently publicized assaults were successful in quickly stealing thousands of credit card 
25 numbers and other confidential information from various web sites. 

Typically, an e-commerce company attempts to protect its fixed encryption key 
and sensitive data by locating its servers in a physically secure room equipped with locked doors 
and surveillance cameras. However, hackers do not need physical access to server rooms in 
order to access data stored on a company's server. Hackers simply need legitimate Internet 
30 protocol (IP) access to the company's network. Even with the use of firewalls, this access can be 
gained through several hacking methods such as IP spoofing and network scanning. After a 
hacker gains access to the network, it simply requires some patience to obtain the fixed 
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encryption key utilizing common cyber attacks and network scanners. Once the encryption key 
is obtained, hackers can decrypt most, if not all, of the information on the company's server 
including credit card nimibers and other sensitive confidential information about the company's 
customers and employees. 
5 From a medical patient's perspective, the consequences of unauthorized access to 

personal medical records are even greater. For a typical consumer, canceling and replacing 
credit cards is a relative minor inconvenience compared to the compromise and potential 
publication of sensitive medical information. Further, tampering with medical information is a 
potentially hfe threatening violation of privacy. Therefore, the protection of confidential 
10 information, especially medical records, requires a greater assurance that the customer's or 
patient's confidential information is secure, 

BRIEF SUMMARY OF THE INVENTION 

There is, therefore, provided in the practice of the invention a novel computer 

15 system utihzing a hidden link dynamic key manager, which provides increased security for 
encrypted data. The computer system broadly includes an encryption key manager operable to 
generate a strong encryption key having an encryption key identification. The computer system 
also includes an information database operable to store a data entity encrypted by the encryption 
key. The information database is further operable to store the encryption key identification in 

20 association with the data entity. 

In a preferred embodiment, the computer system also includes a system key 
manager operable to generate a system key having a system key common name. The system key 
is used to encrypt the encryption key identification. Thus, the encryption key identification is 
preferably encrypted when it is stored in association with the data entity. The system key 

25 common name is also stored, preferably in hash format, on the information database in 
association with the data entity. The computer system also includes a key database, which is 
separate and isolated fi-om the information database. The encryption key and its encryption key 
identification are stored in the key database. Preferably, the system key conmion name is hashed 
in the information database, and the system key common name hash value is stored with the 

30 system key common name in the key database. Alternatively, to separate the system key 
common name from the encryption key identification, a separate system key database can be 



KC-793366-2 



2 



provided for the system key common name and system key common name hash value. The 
system key certificate, which includes the system key itself, is preferably stored in a security 
token such as a smart card. Thus, the computer system is provided with a Smart Card reader. 
The encryption key certificate is also stored in the smart card. 
5 The preferred computer system also includes a key lifetime manager operable to 

monitor encryption key expiration dates and request new encryption keys upon the expiration of 
old encryption keys. In one embodiment, the encryption keys are preferably dynamic and rotate 
with high frequency. The encryption keys change or rotate upon the occurrence of desired 
rotation events such as a user beginning a new task. The encryption keys are dynamic in that 

10 when an encryption key expires, the computer system will retrieve all data encrypted with the old 
encryption key and use a new encryption key to encrypt the data. The system key is preferably 
rotating but not dynamic. The encryption key manager is housed in a security domain, and the 
computer system utihzes a general security manager as a gatekeeper to the security domain. To 
enhance security, the encryption key manager is operable to communicate only with the general 

1 5 security manager. 

In an alternate embodiment, the key hfetime manager is operable to flag the 
expired keys and to change or deactivate the expired keys in the next client request or call. In 
this embodiment, the encryption keys are dynamic in that expired keys are replaced as data is 
retrieved. An advantage of this embodiment is that the key hfetime manager does not control 

20 access to the information database thereby reducing the opportunities for unauthorized access to 
the key hfetime manager. 

In another aspect of the invention, a method for storage and retrieval of encrypted 
data according to the present invention is implemented by the computer system of the present 
invention. Broadly, the method includes encrypting a data entity with an encryption key having 

25 an encryption key identification. The data entity is stored, and the encryption key identification 
is stored in association with the data entity. 

In a preferred embodiment, a user requests data manipulation such as viewing, 
updating, or adding information using a searchable attribute, such as a customer's name. A 
search query is issued for matches of the searchable attribute. Preferably, the searchable attribute 

30 is hashed for reduced search times and increased security. After matches are located, security 
key information is extracted from the data entities. The security key information preferably 
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includes the encryption key identification in an encrypted form and the system key common 
name hash value. The system key common name is then located using the system key common 
name hash value, and the system key common name is then used to retrieve the system key. 
Preferably, a private certificate authority verifies the system key digital certificate. The system 
5 key is then used to decrypt the encryption key identification, which is in tum used to locate the 
encryption key. The data entity is then decrypted with the encryption key. Because of the 
rotating nature of the encryption key, several encryption keys may be used to encrypt all the 
information associated with an individual. Additionally, because of the rotating nature of the 
system key, different system keys may encrypt the encryption key identifications corresponding 
10 to an individual. Because the system key is stored in the Smart Card or other security token, 
which is held within the security domain, the system keys never leave the security domain, and if 
the system key common name is hashed as preferred, the system key common name never leaves 
the security domain. 

In still another aspect of the present invention, a computer readable medium is 

15 provided in the computer system for encrypted data at rest. The computer readable medium 
contains a database structure for the storage of encrypted data. The database structure includes at 
least one data entity encrypted by at least one encryption key and at least one encryption key 
identification in association with the data entity. 

In a preferred embodiment, the system key is used to encrypt the encryption key 

20 identification using its public key, and the database structure further includes the system key 
common name hash value. Preferably the database structure includes two databases including 
the information database, which contains the data entity, and a key database, which contains the 
encryption key, encryption key identification, system key common name hash value, and system 
key common name. In an altemate embodiment, a system key database may be provided which 

25 stores the system key common name and system key common name hash value. As previously 
described, there are preferably a plurality of data entities encrypted by a plurality of encryption 
keys, and the encryption key identifications for the encryption keys are encrypted by multiple 
system keys. The database structure further includes the security token, preferably a Smart Card, 
which stores the system keys' digital certificates and encryption keys' digital certificates. 

30 In a fixrther aspect of the present invention, a computer readable data transmission 

medium in accordance with the present invention contains the data structure described. In a 
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preferred embodiment the data transmission medium includes IPSEC secure channel for 
communication between the general security manager, in the security domain, and the 
information databases in the other domains. 

In a still further aspect of the present invention a method of providing a secure 
5 environment for the storage of information is implemented on the computer system. The method 
includes encrypting a data entity with an encryption key, and storing the data entity. The 
encryption key identification is stored in association with the data entity. Preferably, a system 
key having a system key common name is used to encrypt the encryption key identification. 

In another aspect of the present invention, a method is provided in the computer 

10 system for displaying customer information. Broadly, an authenticated or trusted user enters a 
request to view information, which is then retrieved. The computer system then checks the 
security status of the information, and a security access hst is reviewed to find an identification 
corresponding to the user. The security access level of the user is checked, and the display 
parameters for the information are adapted to modify the available display fields based on the 

15 security access level of the user. The permitted information is then displayed. 

In a preferred embodiment, adapting the display parameters comprises eliminating 
available display fields corresponding to information that the user is not entitled to view. The 
user's identification may be specific to the user's identity or to a role or security level of the user. 
Additionally, when a responsible user marks information as private, the responsible user is 

20 automatically added to the security special access list (SAL). The security special access list 
(SAL) also controls which users may edit the information and which users may only view the 
information. 

In yet another aspect of the present invention, a method is implemented in the 
computer system for communicating with an encryption server. The method includes 
25 estabhshing a trusted communication with a general security manager of the encryption server, 
and entering a request for manipulation of data, A data entity is received in response to the 
request and security key information is retrieved from the data entity. The security key 
information is used to request an encryption key, and after receiving the encryption key, the data 
entity is decrypted. 

30 In a preferred embodiment, retrieving the security key information comprises 

retrieving the encryption key identification in an encrypted form and a system key common 
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name hash value. Again, there is typically a plurality of data entities provided in response to the 
request, and the security key information from the plurality of data entities includes multiple 
encryption key identifications and multiple system key common name hash values. Thus, 
multiple encryption keys are requested, and multiple encryption keys are received with which to 
5 decrypt the plurality of data entities. 

Accordingly, it is an object of the present invention to provide an improved 
system for use in computer systems with database structure for storage of encrypted data and 
methods for storage and retrieval of encrypted data. 

10 BRIEF DESCRIPTION OF THE DRAWINGS 

These and other inventive features, advantages, and objects will appear from the 
following Detailed Description when considered in connection with the accompanying drawings 
in which similar reference characters denote similar elements throughout the several views and 
wherein: 

15 Fig. 1 is a schematic diagram of a computer system implementing a hidden link 

dynamic key manager according to the present invention; 

Fig. 2 is a schematic block diagram of the computer system of Fig. 1 illustrating 
software components of the computer system; 

Fig. 3 is a schematic diagram of the database structure according to the present 
20 invention and utilized by the computer system of Fig. 1; 

Fig. 4 is a schematic diagram of a security key identification attribute of the 
database structure of Fig. 4; 

Fig. 5 is a schematic diagram of a monitor illustrating adaptable display 
parameters according to the present invention and having only pubUc information and fields 
25 displayed; 

Fig. 6 is a schematic diagram of a monitor illustrating the adaptable display 
parameters according to the present invention and having both public and private information 
and fields displayed; 

Fig. 7 is a schematic block diagram illustrating the steps for determining how to 
30 adapt the display parameters illustrated in Figs. 5 and 6; 

Fig. 8 is a schematic diagram of a session encryption key data entity; 
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Fig. 9 is a schematic diagram of a system key common name data entity; 

Fig. 10 is a schematic block diagram illustrating the encryption and storage of 
data entities during an add transaction; 

Fig. 11 is a schematic block diagram illustrating the retrieval and decryption of 
5 data entities during update and view transactions; 

Fig. 12 is a schematic block diagram illustrating an alternate embodiment for the 
retrieval and decryption of data entities during update and view transactions; 

Fig. 13 is a schematic block diagram illustrating the deactivation of session 
encryption keys; and 

10 Fig. 14 is a schematic block diagram illustrating an alternate embodiment for the 

deactivation of session encryption keys. 

DETAILED DESCRIPTION 

Referring to the drawings in greater detail, Figs. 1 and 2 show a computer system 

15 20 constructed in accordance with a preferred embodiment of the present invention for storing 
information. The present invention provides an improved method of encrypting and decrypting 
data preferably at rest. The computer system 20 broadly includes a security domain 22 having an 
encryption key manager (EKM) 24, system key manager (SKM) 84, key Ufetime manager 
(KLM) 88, key auditing manager (KAM) 90 and database adapter (DBAD) 86. The computer 

20 system 20 also includes a plurality of client business domains 26 having an information database 
28. The computer system 20 implements a method according to the present invention. The 
method broadly includes the encryption and storage of data entities 30 (Fig. 3) as illustrated in 
the flow diagram of Fig. 10, and the method also includes the retrieval and decryption of data for 
data manipulation. One embodiment of the retrieval and decryption method is illustrated in the 

25 flow diagram of Fig. 11. The computer system 20 utilizes a data structure illustrated in Fig. 3. 
The data structure broadly includes a plurality of data entities 30 having a security key 
identification attribute 32, which contains security key information as illustrated in Fig. 4. 

Referring to Fig. 1, in addition to the security domain 22 and the client business 
domains 26, the computer system also includes a plurality of client terminals 34. The client 

30 terminals 34 are provided with telecommunications capabilities to communicate with the 
business domain 26, preferably through the Internet 36 utilizing PKI and SSL to provide security 

KC-793366-2 7 



for communications between the client terminals 34 and the business domain 26. However, the 
invention also contemplates the use of dedicated communication lines, such as Intranet, local 
area networks (LAN), and wide area networks (WAN), for example. The Intranet, LAN, and 
WAN apphcations may be utilized for any type of facility or organization where data security is 
5 important such as a bank, hospital, or law firm, for example. The client terminals 34 gain access 
to the client business domains 26 only after passing through security protocols such as firewalls, 
and communication between the client business domain 26 and the security domain 22 
preferably occurs through an Internet protocol secure, virtual private network tunnel (IPSEC, 
VPN tunnel) 38. 

10 The security domain 22 includes a primary key server 40, a secondary key server 

42, a security key database (KEYDB) 44, and a certificate authority server 46. Each of the key 
servers is provided with several conventional components including, for example, small 
computer system interface (SCSI) cards, security hardware adapters, dual 700MHz processors, 
1 and mirrored 20 GB hard drives. The certificate server 46 also includes several conventional 
15 components including a SCSI card, single 700MHz processor, and mirrored 30 GB hard drives. 
J Preferably, component mutual authentication occurs between the security domain components. 
3 COM+, CORBA, or Java security can be used to control the mutual authentication. 
' The primary key server 40 and secondary key server 42 are mirror components. 

^ Thus, the primary and secondary key servers are substantially identical. If the primary key 
jj 20 server 40 fails, the secondary key server 42 begins operation immediately without disruption in 
t overall system operation, thereby providing superior fault tolerance. The transfer in operation is 
3 accomplished through a heart beat failover channel between the primary and secondary servers 
40, 42. The primary and secondary servers 40, 42 each include a tape backup 48, 50, 
respectively, for key retrieval in the event that the ICEYDB 44 is irretrievable or a key integrity 
25 check is failed. The primary server 40 is provided with a primary system key reader 52, 
designated reader #1 in the drawing, and a primary encryption key reader 54, designated reader 
#2 in the drawing. Preferably, each of the primary readers 52, 54 for the primary server 40 store 
the same information. Thus, the primary readers 52, 54 are mirrored hardware components for 
superior fault tolerance. The secondary database 42 also includes a secondary system key reader 
30 56, designated reader #1 in the drawing, and a secondary encryption key reader 58, designated 
reader #2 in the drawing. Preferably, each of the secondary readers 56, 58 for the secondary 
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server 42 store the same information. Thus, the secondary readers 56, 58 are also minored, and 
there are a total of four readers from which key information can be retrieved. The readers 52-58 
comprise security token readers for receiving security tokens. Preferably, the readers comprise 
Smart Card readers for receiving smart cards. A hardware random number generator (HRNG) 

5 59 is also provided in the security domain to generate random numbers, which are used as 
identifiers for keys. While a software random number generator could be used, the HRNG 59 is 
preferred for its increased speed. 

The KEYDB 44 comprises an external disk array with a fault tolerance system for 
mirrored operation providing superior fault tolerance. The external disk array includes a 

10 redundant array of independent disks (RAID) preferably including five (5) disks. The KEYDB 
is preferably operated at RAID level 5, which provides data striping at the byte level and also 
stripe error correction information. Each of the key servers 40, 42 is operable to communicate 
with the KEYDB 44 through IP and utilizing mutual authentication as described above. 

The cUent business domains 26 preferably include a plurahty of client servers 60, 

15 61 and an information database 62, which is isolated from the KEYDB 44. Preferably, a backup 
information database 64 is also provided. The backup information database 64 mirrors the 
primary information data 62 providing redundancy and protection against data loss. Thus, the 
chent business domains 26 are provided with superior fault tolerance. For added security, the 
client business domain servers 60, 61 are only accessible through a firewall 66. Each chent 

20 server 60, 61 may contain multiple business logic components such as business logic component 
number one (BLCl) 68. The BLC's contain instructions and rules for operation of the computer 
system 20 that are set by the chent. Thus, the BLC's provide the chent with the authority to 
make decisions about certain optional features of system operation. 

Generally, each client terminal 34 will include a central processing unit (CPU) 70, 

25 a data entry mechanism, such as a keyboard 72, and a display or monitor 74. The CPU 70 is 
operable to control the monitor 74, receive input from the keyboard 72, and estabhsh and 
maintain communications through the Intemet 36 utilizing a modem, two-way satellite, SDL, or 
other communication apparatus (not shown). The CPU 70 is also operable to control other 
computer system devices such as a printer or disc drives. Preferably, each client terminal is also 

30 equipped with a user security token reader for receiving a security token. In a preferred 
embodiment, the security token reader comprises a Smart Card reader 78 for receiving a Smart 
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Card 80. The Smart Card reader 78 is provided with a private and secured file system. Each 
cUent user is preferably provided with his or her own Smart Card 80, which includes a user 
digital certificate for identifying and authenticating the user. Other known solutions, such as 
user identification and password, can be used to control access and user authentication. Each 
5 user preferably has one or more roles for authorization. The role identifications can include 
assistant level, receptionist level, administrative level, and others. The role identifications 
represent the duties performed by individuals in those levels and the extent of information 
needed for them to properly perform those duties. The user and role identifications are used as 
described below in connection with Fig, 7 to limit access to information. 

10 Referring to Fig. 2, the security domain 22 of the computer system 20 includes 

several software components that are resident on the hardware components illustrated in Fig. 1. 
The primary and secondary key servers 40, 42 include substantially the same software 
components and both will be described with reference to the primary key server 40. The primary 
key server 40 includes several software components: a general security manager (GSM) 82, the 

15 encryption key manager (EKM) 24, a system key manager (SKM) 84, a database adapter 
(DBAD) 86, a key lifetime manager (KLM) 88, and a key auditing manager (KAM) 90. A 
certificate manager (CM) 92 is provided on the private certificate authority (CA) server 46. 

The general security manager (GSM) 82 operates as a gateway to the portions of 
the computer system 20 located in the security domain 22. To that end, each of the security 

20 domain 22 components EKM 24, SKM 84, DBAD 86, KLM 88, KAM 90, CM 92 are preferably 
not operable to communicate directly with any component outside the security domain 22 of the 
computer system 20. They are only operable to communicate with outside components through 
the GSM 82. Preferably, component mutual authentication occurs between the GSM 82, which 
is located in the security domain, and the outside business domain components 68. COM+, 

25 CORBA, or Java security can be used to control the mutual authentication. Thus, neither the 
client user nor any component in the client business domain 26 can contact anything other than 
the GSM 82 through trusted authentication process. 

The GSM 82 is also operable to encrypt the data entities 30 (Fig. 3) using a triple 
data encryption standard (3DES), RC4, or any strong symmetric cryptography algorithm on 

30 selected attributes of the data entities 30C, SOD as directed and requested by the BLC's and other 
components of the computer system 20. Thus, while DES uses symmetric 64-bit key 
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encryption, the GSM uses 3DES or symmetric 192-bit key encryption. Using encryption keys 
with these extended lengths makes the keys more difficult to break. The GSM 82 also performs 
the decryption of the data entities 30 when other components of the computer system 20 request 
decryption. Further, the GSM 82 is operable to perform hashing operations using message digest 
5 5 (MDS), SHA-1, or other strong hashing algorithms as instructed by other components. The 
hash values or integrity values generated in the one way hashing process are typically stored as 
attributes in data entities for integrity check purposes. Preferably, the GSM 82 hashes all of the 
data attributes of the data entities and stores that data hash value as an attribute. After the data 
has been decrypted, it is again hashed and the before and after hash values are compared. If the 

10 two hash values are identical, the integrity of the data in the data entity has been confirmed. If 
two hash values are different, an alarm is issued and the data is retrieved from the backup 
information database 64. 

The encryption key manager (EKM) 24, as its name indicates, generally manages 
encryption keys, which as described below are used to encrypt and decrypt the data entities 30C, 

15 30D. Thus, the EKM 24 is operable to generate multiple session encryption keys (SEK) using 
either 3DES or RC4 and generate session encryption key identifications (SEKID's) for the 
SEK's. The SEKID's are random numbers preferably generated with the HRNG 59 (Hardware 
Random Number Generator). Because the SEK's are rotating and dynamic, as will be more fully 
described below, they are referred to as session encryption keys because a new SEK will be 

20 generated, at a minimum, for each new cUent user session or request within that session. 
Therefore, the EKM 24 is operable to instruct the computer system to change or rotate SEK's 
when a rotation event occurs, such as beginning a new user session. Preferably, new SEK's will 
be generated more frequently as described below, so the SEK's are more appropriately and 
generally referred to as encryption keys. However, for clarity, they will generally be referred to 

25 in the specification as SEK's with the understanding that the broader encryption key meaning is 
included. The EKM is operable to perform integrity checks on the SEK's using hash values for 
the SEK's. The EKM is fiirther operable to transmit the SEKID to the SKM 84 for encryption, 
and the EKM 24 is also operable to transmit the SEK and corresponding SEKID, in encrypted 
form, to the GSM 82, which then encrypts the data entities 30C, 30D using the SEK. 

30 The system key manager (SKM) 84 generally manages system keys, which as 

described below are used to encrypt the SEKID 's. Thus, the SKM 84 is operable to generate the 
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system keys using strong encryption. Preferably, the SKM generates strong PKI 1024-bit keys 
for the system keys. Thus, the system keys preferably utihze asymmetric encryption, so that 
there is a public key and a private key for every system key. The SKM also generates a system 
key common name (SKCN) for each of the system keys. The SKCN's are generated when 
5 generating the system key's PKI digital certificate, so that there is a unique SKCN for each 
system key. The SKM is operable to receive the SEKID from the EKM 24 and encrypt the 
SEKID using its public key. Upon request from the EKM 24, the SKM 84 is also operable to 
decrypt the SEKID using its private key. If desired, the SKM 84 and EKM 24 can be combined 
into a single component and can reside on the same server or CPU. 

10 In a preferred embodiment utihzing Microsoft Crypto API (apphcation program 

interface), the GSM 82 is also operable to encrypt the SEK's with an EKM internal digital 
certificate public key and decrypt the SEK's with an EKM internal certificate private key. The 
EKM internal digital certificate is stored in a certificate store, preferably the primary encryption 
key reader 54. The system key digital certificate is also stored in a certificate store, preferably 

15 the primary system key reader 52. Because of the requirement of verification by the private 
certificate authority, the system key and EKM certificate are obsolete outside the security 
domain 22. This also requires that the decryption methods described below occur during 
computer system operation. That is, during system run time. 

The key lifetime manager (KLM) 88 monitors the lifetime of the SEK's and 

20 system keys based on their expiration dates and timestamps. Preferably, the KLM 88 flags the 
expired SEK's with an expiration flag, so that in the next request, the EKM will check the 
expiration status of the SEK and replace the expired key with a new one during run-time 
operation. Alternatively, the KLM 88 is operable to deactivate expired SEK's and generate 
replacement SEK's. To immediately deactivate the SEK's, all data encrypted by the SEK's is 

25 retrieved and encrypted with a new SEK. However, immediate deactivation of the SEK's 
requires the KLM 88 to control access to the information database 62. Thus, run-time or call-up 
deactivation is preferred. The KLM 88 also instructs the computer system to generate new 
system keys. However, because of the number of SEKID's encrypted by the system keys, the 
system keys are preferably not deactivated. 

30 The key auditing manager (KAM) 90 is operable to maintain an active audit log 

including all transactions involving the SEK's and the system keys. Generally, the KAM 90 
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monitors the log for alarm events utilizing smart patterns, rules, and policies. The KAM 90 is 
also operable to provide notification upon the occurrence of an alarm event, and if a system key 
or SEK has been compromised, the KAM 90 is operable to instruct the EKM 24 or SKM 84 to 
change and/or deactivate the SEK's or system keys. 
5 The certificate manager (CM) 92 is operable to perform all of the system key PKI 

related operations. For each system key the CM 92 generates a X.509 digital certificate. 
Preferably, the digital certificate includes a critical V3 extension, so that only the private 
certificate authority (CA) can verify the key. Each time a request for decryption by a system key 
is received by the SKM 84, the CM communicates with the private certificate authority (CA), 

1 0 which is local to the security domain, to verify the system key. 

The database adapter (DEAD) 86 is operable to hide database specific application 
programming interfaces (API) from the security domain 22 components and thereby controls and 
enhances communications between the key managers 24, 84 and the secured key database 44. 
Thus, by using different DBAD's, the security domain components can interface with different 

15 types of databases, A preferred database is a VERS ANT object oriented database management 
system having built in fault tolerance, scalabihty, object level locking, an object cache, parallel 
query engine, and other features. The DEAD 86 also allows the security domain components to 
interface with multiple databases within the security domain 22, such as Microsoft SQLServer, 
Sybase, Informix, Oracle, and lEM DB2, Thus, the DEAD 86 is operative to switch to a backup 

20 database should a primary database fail, and when the primary database is restored, all 
transactions are updated to the primary database, which again takes control. Preferably, the 
switch from the primary database to the backup database takes place without any delay. While 
the preferred operations and locations of the respective components has been described in detail, 
it is understood that specific tasks can be exchanged between components and the locations of 

25 components can be combined, separated, or exchanged without departing form the spirit of the 
invention. 

Referring to Fig. 3, the database structure preferably comprises an object oriented 
database structure having a plurahty of data entities 30, which are preferably data objects. 
However, other types of databases are contemplated by the invention. For example a relational 
30 database could be used, such as Microsoft SQLServer, Oracle, Sybase, Informix and lEM DE2. 
Thus, when the term "object" is used, its counterparts, "record" for example, are also 
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contemplated, and when the term class is used, its counterparts, "table" for example, are also 
contemplated. 

One of the data entities 30A, specifically a persistent data entity, is shown in 
detail The data entity 30A includes an Added 100 and an Added By attributes 102. The Added 

5 attribute 100 records a timestamp containing the date and time the object was added, and the 
Added By attribute 102 records the digital signature of the user adding the record or data entity. 
The digital signature is derived from the digital certificate of the chent user's Smart Card 80 or 
client's current session and user identification. The Modified and Modified By attributes, 
collectively 104, record the same information for modifications to the data entity 3 OA. In 

10 combination, these non-repudiation attributes 100, 102, 104 inhibit a cUent user firom claiming 
that the user did not take a certain action. The security status (SecStatus) attribute 108 indicates 
whether the data object contains plain text or cipher text and whether it is public or private. 

Referring additionally to Fig. 4, a security key identification attribute 32 is also an 
attribute of the data entity 3 OA and contains security key information. The security key 

15 information includes the encrypted SEKID 112 and the SKCN hash value 114, which are used, 
as described below, to fmd the SEK used to encrypt associated data entities 30C, 30D and to find 
the system key used to encrypt the SEKID 1 12. While it is preferred that the SKCN hash value 
is stored in the security key attribute 32, the SKCN could be stored in this location without 
hashing. 

20 Referring again to Fig. 3, the data entity 3 OA also includes a security integrity 

attribute (Seclntegrity) 116, which contains the data entity hash value. The data entity hash 
value is obtained by hashing all or selective attributes within the data entity. This is controlled 
by business needs and poUcies, which are preferably determined by the cUent and recorded in the 
BLC's. When a data entity is retrieved, it is hashed using MD5 and that data entity hash value is 

25 compared with the stored hash value in the security integrity attribute 116. If the hash values are 
the same, then the integrity of the retrieved data entity is confirmed to be correct and not altered. 
If the hash values are not identical, then an alarm is issued, so that the data can be manually 
confirmed, and as described above, retrieved from the backup information database 62. 

Referring additionally to Figs. 5, 6, and 7, a security privacy attribute 118 controls 

30 access to the information in the associated data entities 30C, 30D. When a chent user, a doctor 
for example, marks his information private, a special access hst (SAL), data entity/class 3 OB is 
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automatically created and the doctor is automatically added to the special access list. The doctor 
can thereafter add and delete user identifications attributes 120 and/or role identifications 122 
from the special access list. The user attributes 120 are based on specific user identifications 
from the smart cards or any other authentication method. The role attributes 122 are based on 
5 different security levels of users. For example, the doctor may grant permission to view private 
data to other doctors but not permit nurses to view private data. The roles can include any 
security level: secretary, shareholder, custodian, and administrative, for example. In this fashion, 
the doctor controls who can view what information and who can edit what information. The 
same holds true for patient records; where nurses and doctors may have full access, clerical staff 
10 may have limited access to name, address, payment, and appointment information. This privacy 
can be applied to any vertical market such as banking, intellectual property systems, e- 
Commerce, law firms, and all applications that deal with highly sensitive or classified 
information. 

When an authenticated client user requests information at step 124 in Fig. 7, the 
15 computer system retrieves the information at step 126, which will be described in greater detail 
below. After the information is retrieved, the system checks the security privacy attribute 1 18 at 
step 128. If the information is not marked private, it is fully displayed on the monitor 130 as 
illustrated in Fig. 6. If the information is marked private, the system checks the security level of 
the client user at step 132. In checking the user's security level, the system looks at both the user 
20 identification and the role identification to see if either are in the special access list, and 
determine what rights, such as view only or edit, the user has to the information. If the client 
user has full view rights, then the display of Fig. 6 is again shown. If the client user is not 
entitled to view the private information, the display parameters are adapted in step 134. In step 
134, the display fields of the private information, which will not be displayed, are eliminated 
25 from the display parameters with their related labels, so that when the permitted information is 
displayed in step 135 on monitor 136 of Fig. 5, the fields for the private information are not 
displayed. 

Further, it is envisioned that the fields for the public information may be 
modified, so that the existence of the private information is completely masked. In the example 
30 shown, personal information 138, such as data of birth and number of children are displayed for 
the user having access to private information. However, for a user without authorization to view 
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the private information, the date of birth and number of children fields are removed from the 
display of Fig, 5. Further, the home address information 140 and work address information 142 
are displayed for the user with authorization to view private information, and the fields 
specifically indicate which address is for work and which address is for home. In contrast, the 
5 user without access to private information not only does not see the home address, the work 
address fields 144 in Fig. 5 are modified to eliminate the designation that it is a work address. 

Referring again exclusively to Fig. 3, the persistent data entity 30A also includes 
several association attributes, which are used by the database schema to associate or link related 
data entities BOB, 30C, 30D to the persistent data entities 30A. To that end, the persistent object 

10 30A includes a class identification attribute 146 and at least two search attributes 148. For faster 
and secured searching, the searchable attributes 148 are preferably hash values of user 
information such as the patient name. The database uses these attributes 146, 148 and others to 
associate related persistent objects 30A and related class objects 30B, 30C, 30D with the 
persistent objects containing the appropriate security key identification 32 that was used to 

15 encrypt data attributes in the class objects. Two exemplary class objects are shown in Fig. 3: a 
person class object 30C and a name class object 30D. Other unillustrated class objects/entities 
include an address entity, employer entity, payment entity, insurance entity, and others. 

The database is also provided with look up maps or notes 150. The illustrated 
lookup map 150 is for gender of the person class. This saves database resources because every 

20 person in the database simply has a 0, 1, or 2 corresponding to undisclosed, male, or female, 
respectively. Thus, the look up map 150 saves database resources because each person class has 
a single digit integer instead of a lengthy word entry. Look up maps are also preferably used for 
the security status attribute 108, the security privacy attribute 118, and others. 

Referring to Figs, 8 and 9, the data structure also includes an SEK object 151 

25 saved in the KEKDB 44 and a SKCN object 152, which is saved in either the KEKDB 44 or in 
an alternate embodiment, a separate system key database (not shown). Thus, for increased 
security, several of the data entities are stored in separate databases. The SEK object/entity 
includes as attributes the SEKID 153 in a normal/decrypted form, the SEK 154, the SEK 
integrity check 155, which is a hash value of the SEK, and the SKCN hash value 156. The SEK 

30 data entity 151 preferably does not include the encrypted SEKID. This creates a hidden hnk 
between the encrypted data and the SEK used to encrypt it because the SEKED is encrypted, and 
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the SEK is stored in a separate database. The SEK object also includes a Created On attribute 
159, which records a time stamp for the creation of the SEK and a Last Usage Date attribute 161, 
which records a time stamp for the last time the SEK was used. Additionally, the SEK object 
preferably has a Usage Counter attribute 163, which records how many times the SEK has been 
5 used. The Created On 159, Last Usage Date 161, and Usage Counter 163 attributes provide the 
client with optional feature selections. Specifically, the client can select to have keys expired a 
certain number of months, two months for example, after their creation. The client can also 
preferably decide to have SEK's expire when they have not been used for a selected period of 
time or when they have been used more than a selected number of times. The client can also 
10 choose to have SEK's expired randomly. The SKCN object/entity includes the SKCN hash 
value 157 and the SKCN 158 as attributes, and is preferably stored in a database separate from 
the data entities 30. 

The above described computer system and database structure are utilized in the 
method of encrypting, storing, retrieving, and decrypting data. When a client user requests a 

15 data manipulation including add, update, and view requests, the computer system will implement 
the appropriate steps. For each transaction, it is assumed that the client user has already gained 
access to the business domain using a trusted authentication method, such as smart cards or two- 
factor authentication devices. 

In Fig. 10, the first step 160 in the add transaction is the entry of data by the cHent 

20 user into the client's browser. In step 162, the entered data is then transmitted to the business 
logic component (BLC) 68 for the client. The BLC 68 then in step 164 requests that the GSM 82 
encrypt the data in accordance with the business rules as set by the client. The business rules, 
which the cUent can amend, will determine which attributes of the data will be encrypted. The 
GSM 82 then request that the EKM 24 generate a SEK in step 166. In step 166, the EKM 

25 generates the SEK and has the HRNG 59 generate the SEKID. The EKM then request the SKM 
84 to encrypt the SEKID with a system key. The SKM 84 obtains the current system key and 
SKCN from the security domain primary, system Smart Card reader 52 and card in step 168. 
The SKM 84 then encrypts the SEKID in step 170. The method preferably uses asymmetric 
encryption of the SEKID, so the SEKID is preferably encrypted by the public key of the system 

30 key in step 170 and returned to the EKM 24. The GSM 82 then hashes the SKCN and SEK to 
obtain the respective hash values in step 172. The SKCN and SKCN hash value are then stored 



KC-793366-2 



17 



in the SKCN data entity 152 in step 174. Next, in step 176, the SEK, SEKID, SKCN hash value, 
and SEK hash value are stored as attributes of the SEK data entity 151 in the KEYDB 44. The 
GSM 82 then, in accordance with the business rules of the BLC 68 encrypts the data entities 
30C, SOD v^ith the SEK in step 178, and the SEK is destroyed from memory in step 180. In step 
5 182, the encrypted data entities 30C, 30D and their associated persistent data entity 30A are then 
stored in the information database 62 corresponding to the cUent BLC 68. The information is 
also stored in the backup information database 64. It is understood that operations are performed 
simultaneously on the mirror components of the system and that information can be retrieved 
jfrom the mirror components if the primary components fail; therefore, further discussion of the 
10 operation of the mirrored components is omitted. The encrypted SEKED 112 and the SKCN hash 
value 114 are stored in the security key identification attribute 32 of the persistent data entity 
30A. 

Referring to Fig. 11, the update and view types of data manipulation requests 
begin with the client user requesting the data manipulation in step 184 based on searchable 

15 information such as customer name. The searchable information is hashed in step 186, and a 
search query is issued in step 188 to the information database 62 to find persistent 
objects/entities with matching hash values in the searchable attributes 148. Matching persistent 
objects 30A are returned with the associated data classes 30C, SOD, and in step 190, the security 
key information including the SCKN hash values 114 and encrypted SEKID's 112 are obtained 

20 form the security key identification attributes 32 of the persistent entities SOA. The BLC 66 then 
sends a decrypt request to security domain 22 through the GSM 82. The GSM 82 extracts the 
encrypted SEKID 112 from the data entity. A search query 192 is then issued to the KEYDB 44 
using the SCKN hash values to obtain the SKCN's from the KEYDB. With the SKCN's, the 
private system keys are obtained in step 194 from the security domain Smart Card reader 52 and 

25 card. The SKM 84 and the CM 92 confirm the digital certificates of the system keys at step 196. 
The SEKID's are then decrypted with the appropriate system key's private key in step 198. A 
search query 200 is again issued to the KEYDB 44 using the decrypted SEKID's to obtain the 
SEK's. 

The SEK's are then hashed in step 202 and the hash values are compared with the 
SO hash values obtained from the security integrity attributes 155 of the persistent SEK objects 151. 
If the pairs of hash values are the same, then the correct SEK's have been obtained for 
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decryption, and the GSM decrypts the data entities 30C, 30D with the SEK's in step 204, If the 
hash values are different, an alarm is sent indicating that the key has been corrupted. To decrypt 
the data entity in the event of a corrupted SEK, the correct SEK is obtained from the primary 
backup tape 48. The SEK obtained form the backup tape is hashed and the hash value is again 
5 compared with the security integrity attribute 155 to confirm the SEK's integrity. If necessary, 
the SEK can be obtained from the secondary backup tape 50. Finally, the decrypted data entities 
are transmitted to the business domain BLC 66 through IPSEC VPN tunnel and then to the client 
terminal 34 utilizing PKI in step 206. 

Figure 12 illustrates an alternate embodiment for the update and view type data 

10 manipulations. The first three steps, transmitting the request 208, hashing the searchable 
information 210, and searching for matching hash values in the persistent objects 212, are 
substantially the same as in the previous embodiment of Fig. 11. In the embodiment of Fig. 12, 
the retrieved data entities are transmitted to the client's terminal at step 214, The cUent CPU 70 
then obtains the security key information from the persistent entities 30A in step 216. In step 

15 218, the SKCN hash values and encrypted SEKID's are transmitted back to the GSM 82. The 
SKM searches for matching SKCN hash values at step 220 and obtains the private system key in 
step 222. The SEKID's are decrypted at step 224 with the private system keys, and the SEK's 
are obtained in steps 226. In this embodiment, the SEK's are then transmitted to the client 
terminal using 128-bit SSL or IPSEC VPN at step 228. If desired, the SEK's are subjected to an 

20 integrity check, and then the client CPU uses the SEK's to decrypt the previously transmitted 
encrypted data entities in step 230, 

As briefly indicated above, the SEK is preferably rotating and dynamic. The SEK 
is rotating in that the SEK changes to a new SEK upon the occurrence of a rotating event. One 
rotating event is the beginning of a new session by a client user. However, rotating events that 

25 occur more frequently are preferred. For example, a new SEK would be requested each time the 
user entered a request or every time the user changed data entry fields on the browser. Thus, the 
SEK's are high frequency rotating, and it is likely that the same customer or patient information 
will be encrypted by multiple SEK's. Additionally, when an individual customer's information 
is updated, the SEK would be different from when that customer's information was first added, 

30 again leading to the same customer's information being encrypted by different SEK's. The 
system key is also rotating, though preferably on a low frequency basis, so that it is also likely 
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that different SEKID's relating to an individual customer's information are encrypted by 
different system keys. 

The SEK may also be dynamic, so that when an SEK is expired, it is also 
deactivated or replaced as illustrated in Fig. 13, The KLM 88 checks the SEK's for expiration in 
5 step 232. If no expired SEK is found in step 234, the KLM continues checking. When the KLM 
88 finds an expired SEK, the KLM requests that the EKM 24 generate a new SEK in step 236. 
The EKM 24 also has the HRNG 59 generate a new SEKID for the new SEK. In step 238 the 
EKM sets an expiration date for the new SEK. In step 240, the SEK object 151 for the expired 
SEK are retrieved from the SKD 44 using the SEKID of the expired SEK. The SKCN's are then 

10 obtained in step 242 using the SKCN hash values stored in the SEK objects. Next, the public 
system keys are obtained &om the security domain Smart Card reader 52 in step 244, and the 
public system keys are used to encrypt the SEKID. A query 246 is then issued to the information 
database 62 for matching SEKID encryption values. The data entities using the old SEK are thus 
retrieved and decrypted in step 248. The data entities are then encrypted at step 250 using the 

15 new SEK, and the data entities are stored in step 252 including the new security key 
identification 32. The same process occurs if the KAM 90 issues an alarm and a user instructs 
the system to deactivate the SEK. Again because of the great number of SEKID's encrypted by 
a single system key, the system key is preferably not dynamic. The system key is preferably 
only low frequency rotating. However, in the unlikely event of a clear compromise of a system 

20 key, the system key can be deactivated. 

In an altemate embodiment illustrated in Fig. 14, the KLM also checks the SEK's 
for expiration at step 260. However, in step 262 when the KLM finds an expired SEK, the KLM 
marks that SEK as expired in the KEYDB 44. In the next customer request at step 264, the data 
is retrieved according to the request, and then in step 266, the SEK is checked to see if it is 

25 flagged as expired. If the SEK is not flagged, the computer system 20 continues as previously 
described. If the SEK is flagged, the EKM will replace the expired key with a new one at step 
268. This embodiment fiirther fragments the data fi-om the perspective of increasing the number 
of SEK's used to encrypt data. Further, in this embodiment, the SEK is dynamic in that it is 
deactivated as data is called up in contrast to the previous embodiment of Fig. 13 where the SEK 

30 is immediately and simultaneously deactivated fi*om all data entities using the expired SEK. 
Thus, the embodiment of Fig. 13 utilizes immediate and simultaneous deactivation while the 
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embodiment of Fig. 14 uses call up deactivation. The system keys are only deactivated as the 
new SEKID's are used. That is, when an SEK is deactivated and a new SEKID must be 
encrypted for storage in the security key identification attribute 32, the then current system key is 
used to encrypt the new SEKID. Thus, that instance of an old system key is deactivated and the 
5 low frequency rotating system keys are preferably not dynamic. 

The computer system 20, database structure, and method according to the present 
invention provide an information storage and retrieval system that is superior to previous 
encryption concepts. For a person to decrypt a single customer's information, the hacker would 
have to penetrate the GSM 82 to gain access to the security domain. Next, the hacker would 

10 have to find a way through the IPSEC channel to the information database 62. The hacker would 
have to trace all associations to find all persistent data entities 30A and associated data entities 
30B, 30C. The hacker would then have to check each data entity to see whether or not it is 
encrypted. The hacker would have to locate the security key identification attribute 32 and 
extract both the encrypted SEKID and the hashed SKCN. The hacker would then have to gain 

15 access to the secure key database within the security domain and search for the security system 
key common names. Additionally, there may be more than one security system key common 
name hash value, so the hacker must obtain more than one security system key common name. 
After obtaining the security system key common name, the hacker would have to gain access to 
the security domain Smart Card reader to obtain the system key. The system key would then 

20 have to be authenticated by the private certificate authority. In the extremely unlikely event that 
the hacker is able to complete these steps, the hacker would have to use the system key to 
decrypt the appropriate SEKID's for every data entity using the authenticated and related system 
key. The hacker would again have to gain access to the KEKDB 44 inside the security domain 
and obtain the SEK's based on the SEKID's. With the security protocols in place in the security 

25 domain, the completion of all these tasks without detection is essentially an impossible task. If a 
hacker attempts a more direct approach attempting to break the keys, the hacker will have no 
more success. Because the computer system and method utilizes 3DES or RC4 encryption it 
would take a hacker an extended period of time to crack even one of the SEK's, and because a 
single patient's records may be encrypted using several SEK's the hacker may spend the rest of 

30 his or her hfe trying to obtain one patient's record. Making the task even more daunting is the 
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need to break at least one 1024-bit system key. All of which must be perfomied without being 
detected by the fCAM 90, or intrusion detection software within the security domain. 

If a hacker attempts to download the information database 62 and attack the 
SEK's, the hacker will have to break many SEK's to obtain a single customer's record, and 
5 because the hacker will likely not know which data entities are related to the customer, the 
hacker will likely have to break hundreds of SEK's before obtaining that single customer's 
record. To obtain all of the customers' records, the hacker will have to break potentially millions 
of SEK's depending on database size. If the hacker also attempts to and successfully downloads 
the KEYDB 44 from the security domain 22, the hacker will have to break the even stronger 

10 asymmetric system keys to decrypt the SEKID's. If the Microsoft Crypto API is utilized, the 
hacker would also have to break the EKM certificate asymmetric keys, which also are preferably 
1024-bit keys. To avoid having to break the system and EKM keys, the hacker would also have 
to steal the certificate stores. Because the system and EKM keys are only found in the smart 
card readers 52, 54, (they are deleted from all other memory i.e. RAM after use). The hacker 

15 would essentially have to gain physical access to the smart card readers 52, 54, and reconstruct 
the security domain 22 and simulate system run time. 

Thus, a hidden link dynamic key manager for use in computer systems with 
database structure for storage of encrypted data and method for storage and retrieval of encrypted 
data is disclosed which utilizes an encryption key identification encrypted by a system key and a 

20 hashed system key common name stored in association with encrypted data to inhibit 
unauthorized access to the data thereby providing a more secure encryption of data at rest. 
While preferred embodiments and particular applications of this invention have been shown and 
described, it is apparent to those skilled in the art that many other modifications and appUcations 
of this invention are possible without departing from the inventive concepts herein. For 

25 example, different types and forms of databases can be used, and the invention can be applied to 
data being transmitted. Additionally, the disclosed application for the encryption system, though 
not described in detail, is for patient medical records. Because of their sensitive nature, the 
encryption system is particularly usefixl for patient medical records. However, the described 
encryption system and method have applications to any type of information including bank 

30 accounts, intemet customer accounts, and others whether they are transmitted and used in the 
Internet context or simply in a CPU context. It is, therefore, to be understood that, within the 
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scope of the appended claims, this invention may be practiced otherwise than as specifically 
described, and the invention is not to be restricted except in the spirit of the appended claims. 
Though some of the features of the invention may be claimed in dependency, each feature has 
merit if used independently. 

5 

GLOSSARY 

Asymmetric Key Encryption: 

An encryption system in which the data is encrypted with a first public key and decrypted 
1 0 with a second private key. 

Attribute/Field: 

A category of data saved in an object. 

1 5 Business Logic Component (BLC): 

A component in the computer system accessible by the client to establish and change 
business rules controlling operation of the system and what data will or will not be 
encrypted. 

20 Certificate Manager (CM): 

Controls the system key PKI related operations and communicates with the private 
certificate authority responsible for issuing and verifying digital certificates for the 
system keys. 

25 Cipher Text: 

Encrypted data 

Class: 

According to object-oriented programming, a category of objects. 

30 

Database Adapter (DEAD): 

Software component, which allows the security domain components to save and retrieve 
data on various types of databases and multiple databases. 

35 

Data Encryption Standard (DES): 

A symmetric-key cushion method using a 64-bit key. 

Decryption: 

40 Changing data fi-om cipher text to plain text. 
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Digital Certificate: 

An attachment to an electronic message used for security pxnposes. A typical digital 
certificate includes certificate holder information, a public key, the certificate issuer, and 
the serial number for the certificate. 

5 

Encryption: 

The translation of data into a secret code. 

Encryption Key Manager (EKM): 
10 A software component of the computer system, which manages the session encryption 

keys including generation, replacing, and other tasks. 

Fault Tolerance: 

The ability of a system to continue operation in the event of unexpected hardware or 
15 software failures. Many fault-tolerant computer systems mirror/duplicate all operations. 

General Security Manager (GSM): 

A software component, which operates as a gatekeeper to the security domain and 
performs hashing, encryption and decryption functions, 

20 

Hardware Random Number Generator (HRNG): 

A device used to generate numbers randomly for the SEKID. 

Hashing: 

25 Generating a number fi'om a string of text that is substantially smaller than the text itself 

The hash value is an irreversible encryption in that the resulting hash value cannot be 
reversed. The hash value or integrity value is used for search queries and for security 
integrity checks. 

30 Intemet Protocol (IP): 

Specifies the format of information and the addressing scheme for transmission of 
information over the Intemet. 

Intemet Protocol Security (IPSEC): 
35 A set of protocols to support secure exchanges of information at the Intemet protocol 

layer. 

IP Spoofing: 

Attempting to make a message appear as if it came from an authorized Intemet protocol 
40 address. 

Key: 

A password or table needed to decipher encrypted data. 
45 Key Auditing Manager (KAM): 
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Maintains an active audit log about all EKM and SKM operations with the ability to send 
alarms and notifications to recipients based on pohcies and rules. 

Key Lifetime Manager (KLM): 
5 Monitors the SEK's for expiration and deactivates expired SEK's or alternatively flags 

SEK's to be deactivated in the next request or call 

Memory (RAM): 

Random access memory. 

10 

Message Digest 5 (MD5): 

A one-way hash function, meaning that it takes a message and converts it into a fixed 
string of digits, also called a message digest. 

15 Object: 

A self-contained entity consisting of both data and procedures to manipulate the data. 
Object Oriented: 

Refers to a special type of programming that combines data structures with functions to 
20 create reusable objects. 

Plain Text: 

Unencrypted data. 

25 Pubhc Key Infi-astructure (PKI): 

A system of digital certificates, certificate authorities, and other registration authorities 
that verify and authenticate the vahdity and identity of parties involved in Internet 
transactions. 

30 Secure Hash Algorithm (SHA-1): 

Another one-way hash function. 

Secure Key Database (KEYDB): 

A database inside the security domain on which the SEK's and SEKID's are saved. 

35 

Secure Sockets Layer (SSL): 

A protocol developed for transmitting secured information via the public Internet. 

Session Encryption Key (SEK): 
40 A rotating and dynamic encryption key used to encrypt data entities. 

Session Encryption Key Identification (SEIQD): 

A randomly generated identification number for the SEK. 

45 Smart Card: 
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A small electronic device about the size of a credit card that contains electronic memory. 
It may include an integrated circuit. 

Symmetric Key Encryption: 
5 An encryption system in which the data is encrypted and decrypted with a single key. 

System Key: 

A PKI key that is used to encrypt and decrypt the SEKID's. 

1 0 System Key Common Name (SKCN): 

System key digital certificate serial number and subject common name. 

System Key Manager (SKM): 

Manages the system keys including generation, verification, and other tasks. 

15 

Virtual Private Network (VPN): 

A network constructed with public wires connecting nodes. 

X.509: 

20 A widely use standard for defining digital certificates. 
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WHAT IS CLAIMED IS: 

1. A computer readable medium containing a database structure for storage of encrypted 
data, the database structure comprising: 

at least one data entity encrypted by at least one encryption key, the data entity having at 

least one searchable attribute; and 
at least one encryption key identification in association with the data entity and 

corresponding to the encryption key. 

2. The computer readable medium according to claim 1 wherein the at least one encryption 
key identification is encrypted by a system key, and the database structure further 
comprises a system key common name corresponding to the system key, and the system 
key common name being stored in association with the data entity. 

3. The computer readable medium according to claim 2 wherein the system key common 
name is hashed, and the data structure further comprising a system key coromon name 
hash value stored in association with the system common name. 

4. The computer readable medium according to claim 3 wherein the system key common 
name and the system key common name hash value are stored on a separate database 
from the at least one data entity. 

5. The computer readable medium according to claim 1 wherein the at least one encryption 
key identification is encrypted by a system key. 

6. The computer readable medium according to claim 1 wherein the at least one encryption 
key comprises a dynamic encryption key, and the at least one encryption key 
identification comprises a dynamic encryption key identification, 

7. The computer readable medium according to claim 1 further comprising a pluraKty of 
data entities encrypted by a plurality of encryption keys, and a plurality of encryption key 
identifications. 
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8. The computer readable medium according to claim 7 wherein the plurality of encryption 
keys comprise dynamic encryption keys, and the plurality of encryption key 
identifications comprise dynamic encryption key identifications. 

5 

9. The computer readable medium according to claim 1 wherein the data structure further 
comprises a plurality of hash values with each of the searchable attributes having a 
corresponding hash value. 

10 10. The computer readable medium according to claim 1 wherein the data structure further 
comprises at least one integrity attribute in association with the data entity. 

11. The computer readable medium according to claim 1 wherein the data structure further 
comprises a security key attribute of the data entity, the security key attribute including 

15 the at least one encryption key identification and a system key common name, 

12. The computer readable medium according to claim 1 further comprising a first database 
including the data entity and encryption key identification stored thereon and a second 
database including the encryption key stored thereon. 

20 

13. The computer readable medium according to claim 12 wherein the first database fiirther 
includes a system key common name stored thereon, and the system key common name 
corresponds to a system key used to encrypt the encryption key identification. 

25 14. The computer readable medium according to claim 13 further comprising a security token 
including the system key stored thereon. 

15. The computer readable medium according to claim 14 wherein the security token 
comprises a Smart Card reader. 

30 
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16. 



The computer readable medium according to claim 1 wherein the at least one encryption 
key identification is stored as an attribute of the data entity. 



17. The computer readable medium according to claim 1 wherein the data entity comprises a 
5 data object having a plurality of attributes. 

18. The computer readable medium according to claim 1 further comprising a second data 
entity including as attributes the encryption key and the encryption key identification. 

10 19. The computer readable medium according to claim 18 wherein the second data entity is 
stored on a separate isolated database from the at least one data entity. 

20. The computer readable medium according to claim 1 further comprising a second data 
entity encrypted by a second encryption key, the second data entity having a second 
15 searchable attribute, and a second encryption key identification corresponding to the 

second encryption key; and wherein the at least one encryption key comprises a first 
encryption key and the at least one encryption key identification comprises a first 
encryption key identification. 

20 21 . The computer readable medium according to claim 20 wherein the second encryption key 
identification is stored as an attribute of the second data entity. 

22. The computer readable medium according to claim 20 wherein the first and second 
encryption key identifications are encrypted by a system key having a system key 

25 common name. 

23. The computer readable medium according to claim 22 wherein the system key comprises 
a public system key. 

30 24. The computer readable medium according to claim 22 fiirther comprising the system key 
common name stored as an attribute of the first and second data entities. 
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25. The computer readable medium according to claim 20 wherein the first encryption key 
identification is encrypted by a first system key, and the second encryption key 
identification is encrypted by a second system key. 

26. The computer readable medium according to claim 20 wherein the first and second data 
entities contain information for an individual customer. 

27. The computer readable medium according to claim 26 wherein the first data entity 
contains medical patient name information, and the second data entity contains medical 
patient address information. 

28. A computer readable data transmission medium containing a data structure for encrypted 
data, the data structure comprising: 

at least one data entity encrypted by at least one encryption key, the data entity having at 

least one searchable attribute; and 
at least one encryption key identification in association with the data entity and 

corresponding to the encryption key. 

29. A computer readable data transmission medium containing a data structure for encrypted 
data, the data structure comprising: 

a plurality of data entities encrypted by at least one encryption key having an encryption 

key identification; and 
at least one system key common name corresponding to a system key operable to encrypt 

the encryption key identification. 
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A computer readable medium containing a database structure for storage of encrypted 
data, the database structure comprising: 

a plurality of data entities encrypted by at least one encryption key having an encryption 

key identification; and 
at least one system key common name corresponding to a system key operable to encrypt 

the encryption key identification. 

The computer readable medium according to claim 30 wherein the data structure further 
comprises the encryption key identification. 

The computer readable medium according to claim 31 wherein the encryption key 
identification is encrypted by the system key. 

The computer readable medium according to claim 30 wherein the pluraUty of data 
entities includes a first data entity encrypted by the at least one encryption key and a 
second data entity encrypted by a second encryption key, and further comprising a first 
encryption key identification corresponding to the at least one encryption key, and a 
second encryption key identification corresponding to the second encryption key. 

The computer readable medium according to claim 33 wherein the system key common 
name comprises a first system key common name corresponding to a first system key, 
and the data structure further comprising the encryption key identification, which is a first 
encryption key identification, being encrypted by the first system key, and a second 
system key common name corresponding to a second system key, and wherein the second 
encryption key identification is encrypted by the second system key. 

The computer readable medium according to claim 33 wherein the plurality of data 
entities includes a third data entity encrypted by the a third encryption key, and further 
comprising a third encryption key identification corresponding to the third encryption 
key. 
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The computer readable medium according to claim 35 wherein the first, second, and third 
data entities pertain to an individual with the first data entity containing name 
information for the individual, the second data entity containing address information for 
the individual, and the third data entity containing telephone information for the 
individual 



37, The computer readable medium according to claim 30 wherein the system key common 
name is hashed. 



10 38. The computer readable medium according to claim 37 further comprising a system key 
data entity including the system key common name and the system key common name 
hash value. 



39. The computer readable medium according to claim 38 wherein the plurality of data 
15 entities are stored on a first database, and the system key data entity is stored on a second 

database. 



40. A method for storage and retrieval of encrypted data, the method comprising: 

encrypting a data entity with an encryption key having an encryption key identification; 
20 storing the data entity; and 

storing the encryption key identification in association with the data entity. 



41 . The method according to claim 40 fixrther comprising: 

requesting a data manipulation using a searchable attribute; 
25 searching for matches to the searchable attribute; 

searching for the encryption key using the encryption key identification; and 
decrypting the data entity with the encryption key. 



42. The method according to claim 41 wherein requesting the data manipulation comprises 
30 requesting a data update of new information, and fiirther comprising encrypting the new 

information with a second encryption key. 
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43. The method according to claim 41 wherein requesting the data manipulation comprises 
requesting an addition of new information, and further comprising encrypting the new 
information with a second encryption key. 

5 

44. The method according to claim 41 wherein requesting the data manipulation comprises 
requesting viewing of current information, and further comprising encrypting the viewed 
information with a second encryption key 

10 45. The method according to claim 40 further comprising encrypting the encryption key 
identification with a system key having a system key common name. 

46. The method according to claim 45 further comprising storing the system key in a security 
token. 

15 

47. The method according to claim 45 further comprising: 
requesting a data manipulation using a searchable attribute; 
searching for matches to the searchable attribute; 

searching for the system key using the system key common name; 
20 decrypting the encryption key identification with the system key; 

searching for the encryption key using the encryption key identification; and 
decrypting the data entity with the encryption key. 

48. The method according to claim 45 wherein encrypting the encryption key identification 
25 with a system key comprises encrypting the encryption key identification with a system 

public key. 

49. The method according to claim 48 further comprising decrypting the encryption key 
identification with a system private key. 

30 
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50. The method according to claim 45 further comprising storing the system key common 
name in association with the data entity. 

51. The method according to claim 45 further comprising checking for expiration of the 
5 system key, and upon expiration of the system key, discontinuing use of the system key 

and generating and using a new system key. 

52. The method according to claim 51 further comprising upon expiration of the system key, 
retaining the system key for decrypting previously encrypted encryption key 

10 identifications. 



53. The method according to claim 40 further comprising encrypting the encryption key 
identification with a system key having a system key common name, hashing the system 
key common name to create a system key common name hash value, and storing the 
1 5 system key common name and system key hash value in association with the data entity. 



54. The method according to claim 53 further comprising: 
requesting a data manipulation using a searchable attribute; 
searching for matches to the searchable attribute; 

20 searching for the system key common name using the system key hash value; 

searching for the system key using the system key conmion name; 
decrypting the encryption key identification with the system key; 
searching for the encryption key using the encryption key identification; and 
decrypting the data entity with the encryption key. 

25 

55. The method according to claim 53 further comprising verifying the system key with a 
private certificate authority, and performing an integrity check on the system key. 

56. The method according to claim 40 further comprising checking the encryption key for 
30 expiration. 
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57. The method according to claim 56 further comprising upon expiration of the encryption 
key, generating a new encryption key having an expiration date, retrieving data entities 
using the encryption key, decrypting the retrieved data entities with the encryption key, 
encrypting the retrieved data entities with the new encryption key, storing the retrieved 
data entities. 

58. The method according to claim 40 further comprising hashing searchable attributes of the 
data entity to determine data entity attribute hash values and storing the data entity hash 
values in association with the data entity. 



10 



59. The method according to claim 58 further comprising: 
requesting a data manipulation using a searchable attribute; 

hashing the searchable attribute to create a searchable attribute hash value; 
searching for matches to the searchable attribute hash value; 
1 5 searching for the encryption key using the encryption key identification; and 

after retrieving the encryption key, decrypting the data entity with the encryption key. 

60. The method according to claim 40 further comprising transmitting the data entity over a 
data transmission line, and wherein encrypting the data entity comprises encrypting only 

20 a portion of the data entity in accordance with a business rule. 

61. The method according to claim 40 further comprising generating a new encryption key 
for each user session. 

25 62. The method according to claim 40 further comprising generating a new encryption key 
for each user action. 

63. The method according to claim 40 further comprising retrieving the encryption key from 
a separate database, and decrypting the data entity with the encryption key. 

30 
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64. 



The method according to claim 40 further comprising auditing the encryption key for a 
desired event. 



65, The method according to claim 40 wherein the data entity and encryption key 
5 identification are stored in a first database, and further comprising storing the encryption 

key in a second database. 

66. The method according to claim 40 further comprising encrypting the encryption key 
identification with a system key having a system key common name, and maintaining the 

1 0 system key within a security domain at all times. 



67. The method according to claim 40 further comprising: 
requesting a data manipulation using a searchable attribute; 
searching for matches to the searchable attribute; 

1 5 searching for the encryption key using the encryption key identification; 

performing an integrity check on the encryption key; and 
decrypting the data entity with the encryption key. 

68. A method for retrieval of encrypted data at rest, the method comprising: 
20 requesting a data manipulation using a searchable attribute; 

searching a plurality of data entities for matches to the searchable attribute; 
obtaining an encryption key identification from the data entities; 
searching for an encryption key using the encryption key identification; and 
decrypting the data entities with the encryption key. 

25 

69. The method according to claim 68 further comprising: 
obtaining a system key common name from the data entities; 
searching for the system key using the system key common name; 
decrypting the encryption key identification with the system key; 

30 

70. A method for storage and retrieval of encrypted data, the method comprising: 
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encrypting a plurality of data entities with a rotating and dynamic encryption key having 

an encryption key identification; 
storing the data entities; and 

creating and rotating to a new encryption key upon occurrence of a desired rotation event. 

5 

71. The method according to claim 70 wherein the desired event comprises beginning a new 
user session. 

72. The method according to claim 70 wherein the desired event comprises beginning a new 
10 user action. 

73. The method according to claim 70 further comprising encrypting the session encryption 
key identification with a rotating system key having a system key common name. 

15 74. A method for storage and retrieval of encrypted data^ the method comprising: 

encrypting a first data entity with a first encryption key having a first encryption key 

identification; 
storing the first data entity; 

storing the first encryption key identification in association with the first data entity; 
20 encrypting a second data entity with a second encryption key having a second encryption 

key identification; 
storing the second data entity; and 

storing the second encryption key identification in association with the second data 
entity. 

25 

75. The method according to claim 74 further comprising encrypting the first and second 
encryption key identifications with a system key having a system key common name^ and 
storing the system key common name in association with the first and second data 
entities. 

30 
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The method according to claim 75 wherein the first and second data entities are hnked 
and relate to an individual. 

The method according to claim 76 further comprising: 

requesting a data manipulation using a searchable attribute relating to the individual; 
searching for matches to the searchable attribute; 

locating the linked first and second data entities relating to the individual; 
retrieving the system key common name; 

searching for the system key using the system key common name; 

decrypting the first and second encryption key identifications with the system key; 

searching for the first and second encryption keys using the jSrst and second encryption 

key identifications; 
decrypting the first data entity with the first encryption key; and 
decrypting the second data entity with the second encryption key. 

The method according to claim 74 further comprising encrypting the first encryption key 
identification with a first system key having a first system key common name, and 
storing the first system key conunon name in association with the first data entity, and 
encrypting the second encryption key identification with a second system key having a 
second system key common name, and storing the second system key common name in 
association with the second data entity. 

The method according to claim 78 further comprising: 

requesting a data manipulation using a searchable attribute relating to the individual; 
searching for matches to the searchable attribute; 
locating the linked first and second data entities relating to the individual; 
retrieving the first and second system key common names; 

searching for the first and second system keys using the first and second system key 
common names; 

decrypting the first encryption key identification with the first system key; 
decrypting the second encryption key identification with the second system key; 
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searching for the first and second encryption keys using the first and second encryption 

key identifications; 
decrypting the first data entity with the first encryption key; and 
decrypting the second data entity with the second encryption key. 

5 

80. A computer system comprising: 

an encryption key manager operable to generate an encryption key having an encryption 
key identification, the encryption key being operable to encrypt a data entity; and 

an information database operable to store the data entity in an encrypted form and the 
10 information database being operable to store the encryption key identification in 

association with the data entity. 

81. The computer system according to claim 80 fiirther comprising a system key manager 
operable to generate a system key having a system key common name, the system key 

1 5 being operable to encrypt the encryption key identification. 

82. The computer system according to claim 81 wherein the information database is fiirther 
operable to store the system key common name in association with the data entity. 

20 83. The computer system according to claim 81 fiirther comprising a security token and a 
security token reader operable to receive the security token, and wherein the system key 
is stored on the security token. 

84. The computer system according to claim 83 wherein the security token comprises a 
25 Smart Card and the security token reader comprises a Smart Card reader. 

85. The computer system according to claim 80 fiirther comprising an encryption key 
database operable to store the encryption key. 

30 86. The computer system according to claim 85 fiirther comprising a system key manager 
operable to generate a system key having a system key common name, the system key 
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manager being further operable to hash the system key common name to create a system 
key common name hash value, the system key being operable to encrypt the encryption 
key identification, and a system key database operable to store the system key common 
name hash value and the system key common name. 

5 

87. The computer system according to claim 80 further comprising a hardware random 
number generator operable to generate the encryption key. 

88. The computer system according to claim 80 further comprising a key lifetime manager 
10 operable to monitor encryption key expiration dates and request new encryption keys 

upon expiration of old encryption keys. 

89. The computer system according to claim 88 wherein the key lifetime manager is operable 
to replace the encryption key with the new encryption key. 

15 

90. The computer system according to claim 80 wherein the encryption key manager is 
operable to generate a new encryption key upon the occurrence of a desired event. 

91. The computer system according to claim 90 wherein the desired event comprises 
20 expiration of the encryption key. 

92. The computer system according to claim 90 wherein the desired event comprises 
beginning a new user action. 

25 93. The computer system according to claim 80 further comprising a system key manager 
operable to generate a system key having a system key common name, the system key 
being operable to encrypt the encryption key identification, and a key hfetime manager 
operable to monitor system key expiration dates and request new system keys upon 
expiration of old system keys 

30 
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94. The computer system according to claim 80 further comprising a general security 
manager operable to communicate with external computer systems, and wherein the 
encryption key manager is only operable to communicate with the general security 
manager. 

95. The computer system according to claim 80 further comprising a business logic 
component operable to determine what portions of the data entity are encrypted, and 
wherein the encryption key manager is not operable to communicate with the business 
logic component. 



96. A computer readable medium containing instructions for controlling a computer system 
to encrypt and decrypt data, by: 

encrypting a data entity with an encryption key having an encryption key identification; 
storing the data entity; and 
1 5 storing the encryption key identification in association with the data entity. 

97. The method according to claim 96 further comprising: 
requesting a data manipulation using a searchable attribute; 
searching for matches to the searchable attribute; 

20 searching for the encryption key using the encryption key identification; and 

decrypting the data entity with the encryption key. 

98. A method of providing a secure environment for the storage of information, the method 
comprising: 

25 encrypting a data entity with an encryption key havmg a randomly generated encryption 

key identification; 
storing the data entity; and 

storing the encryption key identification in association with the data entity. 

30 99. The method according to claim 98 further comprising encrypting the encryption key 
identification with a system key having a system key common name. 
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100. A method in a computer system for displaying customer information, the method 
comprising: 

receiving a request to view information from a user; 
5 retrieving the information; 

checking a security status of the information; 

reviewing a security access list to find an identification corresponding to the user; 
checking a security access level of the user; 

adapting display parameters to modify available display fields based on the security 
1 0 access level of the user; 

displaying the permitted information and display fields based on the security access level 
of the user. 

101. The method according to claim 100 wherein adapting the display parameters to modify 
15 the available display fields comprises eliminating available display fields corresponding 

to information the user is not entitled to view. 

102. The method according to claim 100 wherein checking the security access level of the user 
comprises checking a role identification of the user. 

20 

103. The method according to claim 100 wherein checking the security access level of the user 
comprises checking a user identification of the user. 

104. The method according to claim 100 further comprising automatically adding to the 
25 security access list a responsible user marking the security status of the information as 

private. 

105. A method in a computer system for communicating with an encryption server, the 
method comprising: 

30 establishing communication with a general security manager of the encryption server; 

entering a request for manipulation of data; 
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receiving a data entity in response to the request; 
retrieving security key information from the data entity; 
requesting an encryption key; 
receiving the encryption key; and 
5 decrypting the data entity, 

106. The method according to claim 105 wherein retrieving the security key information from 
the data entity comprises retrieving an encryption key identification. 

10 107. The method according to claim 105 wherein retrieving the security key information from 
the data entity comprises retrieving an encryption key identification in an encrypted form 
and retrieving a system key common name. 

108. The method according to claim 105 wherein retrieving the security key information from 
15 the data entity comprises retrieving an encryption key identification in an encrypted form 

and retrieving a system key common name hash value. 

109. The method according to claim 105 further comprising receiving a plurahty of data 
entities in response to the request, retrieving security key information from the data 

20 entities, requesting multiple encryption keys, and receiving multiple encryption keys. 

110. The method according to claim 105 fiirther comprising inserting a security token into a 
security token reader, 

25 111. An encryption and decryption method for encrypting and decrypting data, the method 
comprising: 

encrypting data with an encryption key having an encryption key identification; and 
encrypting the encryption key identification with a system key having a system key 
common name. 

30 
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112. 



The method according to claim 111 further comprising encrypting the encryption key 
with an encryption key manager digital certificate. 



113. The method according to claim 112 further comprising decrypting the encryption key 
identification with the system key, decrypting the encryption key with an encryption key 
manager private key corresponding to the encryption key manager digital certificate, and 
decrypting the data with the encryption key. 

114. The method according to claim 113 wherein decrypting data without authorization 
requires at least copying an information database, copying a key database, and copying a 
certificate store. 

115. The method according to claim 111 further comprising decrypting the encryption key 
identification with the system key and decrypting the data with the encryption key. 

116. The method according to claim 115 wherein decrypting data without authorization 
requires at least copying an information database, copying a key database, and copying a 
certificate store. 

117. The method according to claim 111 wherein decrypting data occurs only during run time. 

118. The method according to claim 111 wherein the encryption key is dynamic and rotating, 
and the system key is rotating. 

119. The method according to claim 111 further comprising encrypting the system key 
common name and storing the encrypted encryption key identification and encrypted 
system key common name in association with the data encrypted by the encryption key. 

120. The method according to claim 119 wherein encrypting the system key common name 
comprises hashing the system key common name. 
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ABSTRACT OF THE INVENTION 



A computer system (20) with a security domain (22), at least one client business domain 
(26), and a plurality of client terminals (34) utilizes a hidden link dynamic key manager (24, 84) 
5 and a database structure including encrypted data entities (30C, 30D) and a security 

identification attribute (32) for storage of encrypted data. A method for encryption, storage, 
decryption, and retrieval of encrypted data operates on the computer system (20), which also 
includes an information database (62) and a key database (44). The key database (44) is isolated 
from the information database (62). The security domain (22) includes a system key manager 
10 (84) operable to generate system keys with system key common names and an encryption key 
manager (24) operable to generate encryption keys having encryption key identifications. The 
key managers (24, 84) operate on a key server (40), which is mirrored by a secondary key server 
(42). A general security manager (82) also operates on the key server (40) to control access to 
^3 the security domain (22). The security information attribute (32) is stored with a persistent data 
^ 3 15 entity (30A) that is associated with the other data entities (30C, 30D) by a database schema. The 
|y security information attribute (32) includes the encryption key identification (1 12) for the 

p encryption key used to encrypt the data entities (30C, 30D). The encryption key identification is 
I ' encrypted by the system key, and the system key common name hash value (1 14) is also stored 

l;^ in the security information attribute (32). The information data entities (30) are stored on the 
r[| 20 information database (62), but the encryption key identification (153), encryption key (154), 

system key common name hash value (156, 157), and system key common name (158) are stored 
O in the key database (44) inside the security domain (22). The system key itself is stored on a 
Smart Card reader (56) inside the security domain. 
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